$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft File: x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft (raw, json) Hash identifier: b+Gm7Bh+/0VXLJF2TlPK245YgqGdAI23o70JOY6hzso= Subject key identifier: 23:F0:B2:06:B7:88:15:6F:F5:D0:0B:8A:5B:51:03:76:AE:BA:86:0E Authority key identifier: C7:7C:13:09:F4:A1:53:0E:A3:95:41:45:28:81:5F:9C:76:7C:51:5B Certificate issuer: /CN=A91E3377/serialNumber=C77C1309F4A1530EA395414528815F9C767C515B Certificate serial: 05A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x3wTCfShUw6jlUFFKIFfnHZ8UVs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft Manifest number: 059C Signing time: Tue 04 Nov 2025 23:15:20 +0000 Manifest this update: Tue 04 Nov 2025 23:15:20 +0000 Manifest next update: Tue 11 Nov 2025 23:15:20 +0000 Files and hashes: 1: x3wTCfShUw6jlUFFKIFfnHZ8UVs.crl (hash: Y9UuqSovJOdMdtkyteicZkxyKpayil4kh4eImuMZ1aM=) 2: 4756B350EF9011EBAAE0375AC4F9AE02.roa (hash: H5pjI/DUhiXyW6sQwhGG/wb5HeJLy8aTxQs1mqyRqSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.crl rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x3wTCfShUw6jlUFFKIFfnHZ8UVs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:15:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1441 (0x5a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3377, serialNumber=C77C1309F4A1530EA395414528815F9C767C515B Validity Not Before: Nov 4 23:15:20 2025 GMT Not After : Nov 11 23:15:20 2025 GMT Subject: CN=690a8908-326f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3f:39:1c:90:70:e7:11:03:d2:1a:88:89:8b: a5:ae:fa:1f:1e:a1:a8:1c:ab:5f:bc:63:a0:74:c9: 38:2f:b6:55:72:22:3f:73:44:0a:ed:5d:d4:48:56: 11:26:ce:2a:81:b3:9d:e8:5b:b5:3a:39:8b:57:82: 3a:d1:bd:3b:ed:94:f2:97:55:01:47:0d:db:5e:fa: 16:ca:35:9d:43:44:c7:9f:a9:1c:55:8c:ee:66:14: 5f:e1:69:c2:fe:b9:f7:81:b0:c5:5b:81:82:4a:c9: c7:c2:0f:98:d4:a8:01:88:ae:96:d5:a6:71:0c:fb: c0:36:cd:f4:7e:43:31:4d:5c:0f:de:58:57:20:32: 9f:44:be:78:63:b2:91:73:ee:9c:1c:62:e7:7e:57: 1b:bf:45:ab:cf:e2:aa:9b:65:d5:a9:bf:ac:95:53: 5d:30:9c:bc:f6:c0:81:8b:79:18:fe:e7:0d:08:df: ef:1a:9a:d4:6f:8a:45:26:67:ef:9f:d9:d9:43:f4: aa:4e:cb:57:dd:b3:78:06:69:44:49:95:0e:ee:89: 61:fb:c8:06:32:6f:eb:ff:c9:c9:5d:d3:8a:4b:20: 98:39:f1:7e:4f:c1:c5:d0:f0:48:52:f5:76:67:aa: 8e:ce:99:9f:b0:3a:9d:be:c8:ed:96:e8:89:27:0b: 4d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:F0:B2:06:B7:88:15:6F:F5:D0:0B:8A:5B:51:03:76:AE:BA:86:0E X509v3 Authority Key Identifier: keyid:C7:7C:13:09:F4:A1:53:0E:A3:95:41:45:28:81:5F:9C:76:7C:51:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x3wTCfShUw6jlUFFKIFfnHZ8UVs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:64:71:b3:14:72:97:4b:1e:8f:78:ad:a0:41:d3:29:1b:e7: 05:bc:5f:19:70:17:c9:37:bc:86:17:20:bf:48:7b:9b:0e:07: 7f:9b:32:0b:1a:e1:d2:dc:ca:5b:e2:97:85:06:fd:af:0d:4d: 80:18:89:44:cb:70:67:d3:bb:16:ee:d6:6f:1c:7c:68:93:8d: 4a:e1:8d:9f:05:10:06:17:ef:f3:1f:d4:63:3b:0d:d0:b9:a4: 80:d6:b3:bc:be:e9:30:f3:00:da:4b:a2:91:c1:07:f1:4d:34: 1d:38:2b:b7:02:58:25:b2:e8:60:29:2b:d5:36:33:fc:0e:7e: 22:4a:f0:ef:2f:41:20:37:73:51:03:b3:1a:56:c5:15:40:bc: f3:46:d4:6c:93:32:b0:21:3b:31:8b:78:db:b5:6a:d4:da:da: ed:18:9f:9c:d2:af:f4:ed:26:09:a2:1b:2b:3d:96:d3:cb:43: b7:2b:c3:70:fc:75:5a:e5:30:d8:28:22:17:46:7b:dc:6e:26: e3:28:2c:65:57:fa:02:06:81:b5:67:ad:68:12:4d:23:1f:b3: 09:60:3f:57:8c:2c:b1:00:24:bd:96:c6:54:36:46:23:a3:51: 61:47:21:93:5d:61:60:1a:b8:ac:29:03:c7:f8:f4:1b:20:f4: e2:6d:e8:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTMzNzcxMTAvBgNVBAUTKEM3N0MxMzA5RjRBMTUzMEVBMzk1NDE0NTI4ODE1RjlD NzY3QzUxNUIwHhcNMjUxMTA0MjMxNTIwWhcNMjUxMTExMjMxNTIwWjAYMRYwFAYD VQQDEw02OTBhODkwOC0zMjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0j85HJBw5xED0hqIiYulrvofHqGoHKtfvGOgdMk4L7ZVciI/c0QK7V3USFYR Js4qgbOd6Fu1OjmLV4I60b077ZTyl1UBRw3bXvoWyjWdQ0THn6kcVYzuZhRf4WnC /rn3gbDFW4GCSsnHwg+Y1KgBiK6W1aZxDPvANs30fkMxTVwP3lhXIDKfRL54Y7KR c+6cHGLnflcbv0Wrz+Kqm2XVqb+slVNdMJy89sCBi3kY/ucNCN/vGprUb4pFJmfv n9nZQ/SqTstX3bN4BmlESZUO7olh+8gGMm/r/8nJXdOKSyCYOfF+T8HF0PBIUvV2 Z6qOzpmfsDqdvsjtluiJJwtNLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCPwsga3 iBVv9dALiltRA3auuoYOMB8GA1UdIwQYMBaAFMd8Ewn0oVMOo5VBRSiBX5x2fFFb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzM3Ny82MEI3N0RBRUVG OEUxMUVCQjBEQTRFNTlDNEY5QUUwMi94M3dUQ2ZTaFV3NmpsVUZGS0lGZm5IWjhV VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gzd1RDZlNoVXc2amxVRkZLSUZmbkhaOFVWcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzM3Ny82MEI3N0RBRUVGOEUxMUVCQjBEQTRFNTlDNEY5QUUwMi94M3dUQ2ZTaFV3 NmpsVUZGS0lGZm5IWjhVVnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaZHGzFHKXSx6PeK2gQdMpG+cFvF8ZcBfJN7yGFyC/SHubDgd/mzIL GuHS3Mpb4peFBv2vDU2AGIlEy3Bn07sW7tZvHHxok41K4Y2fBRAGF+/zH9RjOw3Q uaSA1rO8vukw8wDaS6KRwQfxTTQdOCu3AlglsuhgKSvVNjP8Dn4iSvDvL0EgN3NR A7MaVsUVQLzzRtRskzKwITsxi3jbtWrU2trtGJ+c0q/07SYJohsrPZbTy0O3K8Nw /HVa5TDYKCIXRnvcbibjKCxlV/oCBoG1Z61oEk0jH7MJYD9XjCyxACS9lsZUNkYj o1FhRyGTXWFgGrisKQPH+PQbIPTibehG -----END CERTIFICATE-----Generated at Wed Nov 5 13:35:22 2025 by rpki-client